136.227.95.52 - IPInfo

Basic Info

City: Springfield

Region: Ohio

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: OARnet

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 136.227.95.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46978
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;136.227.95.52.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061301 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 14 01:45:23 CST 2019
;; MSG SIZE  rcvd: 117

Host info

52.95.227.136.in-addr.arpa domain name pointer internal.Wittenberg.EDU.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
52.95.227.136.in-addr.arpa	name = internal.Wittenberg.EDU.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.31.127	attack	Jul 4 04:33:20 dbanaszewski sshd[12272]: Unable to negotiate with 222.186.31.127 port 24637: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:38:46 dbanaszewski sshd[12319]: Unable to negotiate with 222.186.31.127 port 45642: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:40:25 dbanaszewski sshd[12374]: Unable to negotiate with 222.186.31.127 port 27075: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]	2020-07-04 10:51:48
193.254.135.252	attack	[ssh] SSH attack	2020-07-04 11:12:53
109.94.119.128	attackspambots	port scan and connect, tcp 23 (telnet)	2020-07-04 10:50:11
68.183.81.243	attack	Jul 4 02:07:37 vm0 sshd[30663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.81.243 Jul 4 02:07:40 vm0 sshd[30663]: Failed password for invalid user ftp-user from 68.183.81.243 port 50888 ssh2 ...	2020-07-04 10:46:46
182.76.74.78	attack	Triggered by Fail2Ban at Ares web server	2020-07-04 11:09:20
45.141.84.110	attack	Jul 4 04:56:32 debian-2gb-nbg1-2 kernel: \[16090013.058180\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.110 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41821 PROTO=TCP SPT=55780 DPT=8243 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-04 10:58:24
196.52.43.128	attackbots	firewall-block, port(s): 5907/tcp	2020-07-04 11:22:03
46.38.148.10	attack	2020-07-04 03:21:14 auth_plain authenticator failed for (User) [46.38.148.10]: 535 Incorrect authentication data (set_id=communications@csmailer.org) 2020-07-04 03:21:41 auth_plain authenticator failed for (User) [46.38.148.10]: 535 Incorrect authentication data (set_id=dominios@csmailer.org) 2020-07-04 03:22:11 auth_plain authenticator failed for (User) [46.38.148.10]: 535 Incorrect authentication data (set_id=psa@csmailer.org) 2020-07-04 03:22:42 auth_plain authenticator failed for (User) [46.38.148.10]: 535 Incorrect authentication data (set_id=pub@csmailer.org) 2020-07-04 03:23:11 auth_plain authenticator failed for (User) [46.38.148.10]: 535 Incorrect authentication data (set_id=baike@csmailer.org) ...	2020-07-04 11:27:57
223.70.214.114	attack	20 attempts against mh-ssh on leaf	2020-07-04 11:05:25
141.98.81.42	attackbotsspam	TCP (SYN) 141.98.81.42:9399 -> port 22, len 60	2020-07-04 11:13:10
46.32.45.207	attackbots	Jul 4 04:26:36 vm0 sshd[582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.32.45.207 Jul 4 04:26:38 vm0 sshd[582]: Failed password for invalid user ubuntu from 46.32.45.207 port 57352 ssh2 ...	2020-07-04 10:57:42
104.248.246.4	attackspam	no	2020-07-04 11:18:42
118.24.153.230	attack	Jul 4 00:19:15 jumpserver sshd[320410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.153.230 Jul 4 00:19:15 jumpserver sshd[320410]: Invalid user tomcat from 118.24.153.230 port 54146 Jul 4 00:19:17 jumpserver sshd[320410]: Failed password for invalid user tomcat from 118.24.153.230 port 54146 ssh2 ...	2020-07-04 10:49:30
112.85.42.173	attackspambots	Jul 4 04:17:28 ajax sshd[25722]: Failed password for root from 112.85.42.173 port 18487 ssh2 Jul 4 04:17:31 ajax sshd[25722]: Failed password for root from 112.85.42.173 port 18487 ssh2	2020-07-04 11:19:47
171.243.115.194	attack	Jul 4 06:22:08 hosting sshd[2212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.243.115.194 user=root Jul 4 06:22:11 hosting sshd[2212]: Failed password for root from 171.243.115.194 port 49188 ssh2 ...	2020-07-04 11:24:49

Recently Reported IPs

125.184.98.28	116.71.201.48	14.192.210.62	111.179.8.101
217.64.148.89	130.218.188.171	184.16.223.53	1.31.81.201
195.47.36.248	97.219.25.229	172.227.203.205	24.80.140.165
99.97.72.33	157.230.134.56	210.115.170.198	43.252.12.26
45.246.159.172	74.215.172.80	177.55.195.183	129.184.172.250